Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-09-2023 23:20

General

  • Target

    e522434a2227142f75f6eaae7bf681fe0c164d3f43a250d53cd7b5e0b6535944.exe

  • Size

    4.6MB

  • MD5

    a0e91ab0f1c7b8a857867e9c73c61ad2

  • SHA1

    07230a4df9dff9dff7addb69ccb46437cd6c389b

  • SHA256

    e522434a2227142f75f6eaae7bf681fe0c164d3f43a250d53cd7b5e0b6535944

  • SHA512

    5a967e6f7480644e122cecc9c5727f30596e1b42f9eead2f8fbee2bb8511c94e2bd139f9138304c469e4b1a5084c1d55a62fee767e2846de9a8c74ce6e1cec58

  • SSDEEP

    98304:IG1c5g+Wm3n0tzGoFrnoNspKdzOJDb4v+:UgjGoFrn4wN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e522434a2227142f75f6eaae7bf681fe0c164d3f43a250d53cd7b5e0b6535944.exe
    "C:\Users\Admin\AppData\Local\Temp\e522434a2227142f75f6eaae7bf681fe0c164d3f43a250d53cd7b5e0b6535944.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    dd95dc56f95f0bf39d521e40cbf6be7c

    SHA1

    d488b8260021286bf3fa370e462447d8dfe03bef

    SHA256

    398d821b53208ae165140f1e8eae382c5cc7d698016a3aa90a0ce3e9dfd52814

    SHA512

    386f3538773f28b9b546815c4fed4ac1004e875c0d23fc0747e92605b0e61f0d7eb6630a3b7759c539b494589d8f9a50356eb6e745faac626214b761378c68fd

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    e91269870239918db34467a12b1994b0

    SHA1

    a381056e566ace3b41e377a5751488dd07a87e40

    SHA256

    b0f4660679e3225e741b5a2accfc8fd15c51e7d9fdbbb3d52da00c66a20fe48a

    SHA512

    77a54d43560a7e7f5c3872d85fa3653fe0e9312c38bd5a1d3f30bde924e3e6cd1ece720f8017cd2e015fef7b9c5b15af13ecc6c54950cb49464ea50f6b1edc90